Files
ansible-role-common/tasks/RedHat.yml
2022-03-11 22:02:17 +13:00

76 lines
1.7 KiB
YAML

---
# tasks file for common role
- include: networking.yml
- name: Ensure common packages (RHEL)
yum:
name: "{{ common_packages }}"
state: present
enablerepo: epel
when: ansible_distribution != 'OracleLinux'
tags: packages
- name: Ensure common packages (OracleLinux)
yum:
name: "{{ common_packages }}"
state: present
enablerepo: ol7_developer_EPEL
when: ansible_distribution == 'OracleLinux'
tags: packages
- name: Check if SELinux is installed
stat:
path: /etc/selinux/config
register: se
tags: security
# - name: SELinux Management
# block:
# - name: selinux | Ensure SELinux status
# selinux:
# state: disabled
# register: sestate
# - name: selinux | Message Output
# debug:
# msg: "SELinux {{ sestate.msg }}"
# when: sestate.changed
# when: se.stat.exists
# tags: security
- name: Create admin group
group: name={{ ADMIN_GROUP }} state=present
- name: Configure yum limit
lineinfile:
dest: /etc/yum.conf
regexp: "installonly_limit="
line: "installonly_limit=2"
tags: packages
- name: Ensure Helpers are present
copy:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
mode: u+rwx,g+rx,o+rx
with_items:
- src: helpers/reload_scsi_devices
dest: /usr/local/bin/reload_scsi_devices
- src: helpers/reload_scsi_hosts
dest: /usr/local/bin/reload_scsi_hosts
- name: Ensure Hostname is set
hostname:
name: "{{ inventory_hostname }}.{{ domain }}"
when: ansible_virtualization_type != "docker"
- name: Change root password
user:
name: root
password: "{{ common_root_pwd | password_hash('sha512') }}"
changed_when: false
tags: rootpw
- include: grub.yml
- include: communication.yml
- include: motd.yml